This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
File:                     BA56744DBF20010C478D63405BC3FD8408043C5B.mft (raw, json)
Hash identifier:          EnvkiYoFJ1oU4DPLXMTQFogT2WFK0vhSEtB275qc764=
Subject key identifier:   2A:4B:76:2A:17:16:C2:38:42:B1:92:7F:F1:82:BC:42:9F:22:D6:9D
Authority key identifier: BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
Certificate issuer:       /CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Certificate serial:       6EEE5EAF5FD4EB6DDF8EC4CA5ECBE1B7B2F9ABC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
Manifest number:          0148
Signing time:             Fri 05 Dec 2025 04:05:05 +0000
Manifest this update:     Fri 05 Dec 2025 04:00:05 +0000
Manifest next update:     Wed 10 Dec 2025 02:56:05 +0000
Files and hashes:         1: 3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa (hash: W5oaYj6JaleQIAoM8xboWTZuupgn/Fn/cGFicnFvQzY=)
                          2: 323830303a3239303a3a2f33322d3332203d3e203230303135.roa (hash: ikHPzFpp7bxy6y2vOlwCnW74zSUZqwVYjJ+r5iOn+BA=)
                          3: 3230312e3231392e3132382e302f31392d3234203d3e203230303135.roa (hash: fWrhXhF9scDrwi2L1Q/PPU9PBwyrbb5fCwbqrb9Zs4A=)
                          4: BA56744DBF20010C478D63405BC3FD8408043C5B.crl (hash: bgLosaZl97Wfr+2pSfySup2VCYlscTwuCJ2ugEZwiko=)
                          5: 3230312e3231392e3133302e302f32342d3234203d3e20323635373035.roa (hash: uM9ZhdVJKNhMFlPwlLvHQcPJ7Tfe/xqL1jdXxaz4V8k=)
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Dec 2025 02:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ee:5e:af:5f:d4:eb:6d:df:8e:c4:ca:5e:cb:e1:b7:b2:f9:ab:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA56744DBF20010C478D63405BC3FD8408043C5B
        Validity
            Not Before: Dec  5 04:00:05 2025 GMT
            Not After : Dec 10 02:56:05 2025 GMT
        Subject: CN=2A4B762A1716C23842B1927FF182BC429F22D69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:82:3b:bf:85:d3:f8:bf:c7:e2:62:61:f1:
                    58:c1:73:db:1e:ee:73:0f:a0:e2:22:8e:36:d0:d3:
                    ae:49:39:8c:3f:2f:48:72:78:63:74:78:16:a7:18:
                    99:e1:8d:71:50:bd:33:ed:f0:4d:d8:7f:ed:81:4b:
                    7c:af:1d:fb:1c:39:2c:0f:df:90:e2:11:77:bb:29:
                    13:0f:f9:7a:81:b9:f9:c6:32:12:b1:62:3e:3c:b4:
                    05:42:92:9d:cc:03:88:09:c7:ab:32:9b:1c:15:1b:
                    a1:8a:7e:2c:70:a7:0b:25:b8:39:46:5f:02:93:2e:
                    aa:42:91:de:3c:71:31:8d:3e:62:18:34:79:c3:b1:
                    27:60:84:c6:26:77:69:12:9f:af:e9:1d:b3:c9:88:
                    6e:ac:3c:7e:8b:78:1c:0f:9d:c6:4a:30:43:5e:36:
                    ba:9b:0e:9a:8f:cf:8e:ba:26:a2:90:d4:7d:38:11:
                    5c:cd:4e:9e:d9:7f:00:0c:6f:26:08:e3:18:9c:3d:
                    96:2a:cd:7c:0a:2d:7f:35:fe:f6:e0:e2:dc:8b:31:
                    a3:f6:d6:e3:17:7e:2e:33:d9:af:c0:db:74:e9:45:
                    22:c2:53:77:12:0f:07:3e:a7:a8:9b:c2:d6:d3:63:
                    e9:df:15:9b:1b:e2:58:14:0a:67:7b:58:39:7b:bb:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4B:76:2A:17:16:C2:38:42:B1:92:7F:F1:82:BC:42:9F:22:D6:9D
            X509v3 Authority Key Identifier:
                keyid:BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c6:09:e0:4b:88:f4:e7:97:56:eb:a9:7b:0b:7d:9a:c6:b0:
         2b:79:bb:35:25:e1:77:56:0e:7a:1a:86:86:3e:13:44:0f:08:
         5f:3c:05:dd:b5:aa:d6:ee:c2:cd:4b:61:d3:94:18:3e:0f:c0:
         91:6c:d6:14:41:af:1c:1f:f7:83:68:86:99:9b:a7:76:23:f2:
         ea:d0:cc:47:e3:8c:0a:0f:fd:7a:7a:0e:66:2e:9f:6b:d9:e8:
         c2:24:d9:f5:6e:07:93:8e:98:1e:5a:06:29:a4:fc:70:b6:53:
         57:46:aa:77:32:98:e3:48:9e:6a:56:0e:ca:e2:7d:ff:6c:3c:
         66:f2:4e:6f:9a:f6:ca:7f:b0:0c:fd:c7:7d:a1:92:cc:f8:bb:
         65:a0:bc:a4:c5:16:b7:bb:52:89:bb:ce:d3:3d:62:e9:5f:07:
         52:63:53:21:d4:81:1d:df:23:64:9d:09:88:b4:4c:ba:bb:b4:
         a6:01:50:a1:68:ff:ff:04:28:b8:2f:a1:35:ce:ad:ac:02:42:
         53:53:32:cf:c7:71:ff:bb:03:68:11:09:43:8f:5b:1f:49:be:
         1b:b5:8d:31:84:b3:a3:a3:82:30:8e:02:f1:c8:1d:24:66:c9:
         c2:b5:2e:e3:ff:f3:f0:f4:43:60:c7:cf:f4:9f:54:46:83:35:
         f4:17:f8:53
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUbu5er1/U623fjsTKXsvht7L5q8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE1Njc0NERCRjIwMDEwQzQ3OEQ2MzQwNUJDM0ZEODQw
ODA0M0M1QjAeFw0yNTEyMDUwNDAwMDVaFw0yNTEyMTAwMjU2MDVaMDMxMTAvBgNV
BAMTKDJBNEI3NjJBMTcxNkMyMzg0MkIxOTI3RkYxODJCQzQyOUYyMkQ2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuoI7v4XT+L/H4mJh8VjBc9se
7nMPoOIijjbQ065JOYw/L0hyeGN0eBanGJnhjXFQvTPt8E3Yf+2BS3yvHfscOSwP
35DiEXe7KRMP+XqBufnGMhKxYj48tAVCkp3MA4gJx6symxwVG6GKfixwpwsluDlG
XwKTLqpCkd48cTGNPmIYNHnDsSdghMYmd2kSn6/pHbPJiG6sPH6LeBwPncZKMENe
NrqbDpqPz466JqKQ1H04EVzNTp7ZfwAMbyYI4xicPZYqzXwKLX81/vbg4tyLMaP2
1uMXfi4z2a/A23TpRSLCU3cSDwc+p6ibwtbTY+nfFZsb4lgUCmd7WDl7u+sPAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQUKkt2KhcWwjhCsZJ/8YK8Qp8i1p0wHwYDVR0j
BBgwFoAUulZ0Tb8gAQxHjWNAW8P9hAgEPFswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNEJCNDIxOTVBMzAzOEE4MUMxRjEyMDBFMzBGOEQ1MUY3
NTI4MDFFNzIyQjk1NEVFN0E1NzA1RDcwQzcyQ0IwLzAvQkE1Njc0NERCRjIwMDEw
QzQ3OEQ2MzQwNUJDM0ZEODQwODA0M0M1Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQTU2NzQ0REJGMjAwMTBDNDc4
RDYzNDA1QkMzRkQ4NDA4MDQzQzVCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDRCQjQyMTk1QTMwMzhBODFDMUYxMjAwRTMwRjhENTFGNzUyODAxRTcy
MkI5NTRFRTdBNTcwNUQ3MEM3MkNCMC8wL0JBNTY3NDREQkYyMDAxMEM0NzhENjM0
MDVCQzNGRDg0MDgwNDNDNUIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtxgngS4j055dW66l7C32axrAr
ebs1JeF3Vg56GoaGPhNEDwhfPAXdtarW7sLNS2HTlBg+D8CRbNYUQa8cH/eDaIaZ
m6d2I/Lq0MxH44wKD/16eg5mLp9r2ejCJNn1bgeTjpgeWgYppPxwtlNXRqp3Mpjj
SJ5qVg7K4n3/bDxm8k5vmvbKf7AM/cd9oZLM+LtloLykxRa3u1KJu87TPWLpXwdS
Y1Mh1IEd3yNknQmItEy6u7SmAVChaP//BCi4L6E1zq2sAkJTUzLPx3H/uwNoEQlD
j1sfSb4btY0xhLOjo4IwjgLxyB0kZsnCtS7j//Pw9ENgx8/0n1RGgzX0F/hT
-----END CERTIFICATE-----